21711 matches found
libceph: return the handler error from mon_handle_auth_done()
...
libceph: make free_choose_arg_map() resilient to partial allocation
...
libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
...
libceph: prevent potential out-of-bounds reads in handle_auth_done()
...
net: mscc: ocelot: Fix crash when adding interface under a lag
...
nfsd: provide locking for v4_end_grace
...
wifi: avoid kernel-infoleak from struct iw_point
...
net: sock: fix hardened usercopy panic in sock_recv_errqueue
...
net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset
...
dmaengine: idxd: fix device leaks on compat bind and unbind
...
net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
...
KEYS: trusted: Fix a memory leak in tpm2_load_cmd
...
HID: uclogic: Correct devm device reference for hidinput input_dev name
...
nats-server websockets are vulnerable to pre-auth memory DoS
...
Vitess users with backup storage access can write to arbitrary file paths on restore
...
Vitess users with backup storage access can gain unauthorized access to production deployment environments
...
Chromium: CVE-2026-3063 Inappropriate implementation in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3062 Out of bounds read and write in Tint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-3061 Out of bounds read in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Malformed Valkey Cluster bus message can lead to Remote DoS
...
Valkey Affected by RESP Protocol Injection via Lua error_reply
...
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
...
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
...
This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods to enter an infinite loop, hanging the process indefinitely.
...
TFTP Path Traversal
...
Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse
...
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
...
sched/mmcid: Don't assume CID is CPU owned on mode switch
...
erofs: fix UAF issue for file-backed mounts w/ directio option
...
scsi: qla2xxx: Free sp in error path to fix system crash
...
nilfs2: Fix potential block overflow that cause system hang
...
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
...
scsi: qla2xxx: Validate sp before freeing associated memory
...
PCI: endpoint: Avoid creating sub-groups asynchronously
...
wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
...
scsi: qla2xxx: Delay module unload while fabric scan in progress
...
xfs: fix UAF in xchk_btree_check_block_owner
...
bus: fsl-mc: fix use-after-free in driver_override_show()
...
smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
...
hfs: ensure sb->s_fs_info is always cleaned up
...
crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
...
crypto: virtio - Add spinlock protection with virtqueue notification
...
Limited path traversal when installing wheel archives
...
Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure
...
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
...
bonding: annotate data-races around slave->last_rx
...
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
...
Chromium: CVE-2026-2650 Heap buffer overflow in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2649 Integer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-2648 Heap buffer overflow in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...